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Cisco IOS Denial of Service Vulnerability 


ADVISORY OVERVIEW 


July 17, 2003 - Qualys™ Vulnerability R&D Lab today released a new vulnerability 
signature in the QualysGuard® Web Service to protect enterprises against the new 
Cisco™ IOS Denial of Service vulnerability. Customers can immediately audit their 
networks for these new vulnerabilities by accessing their QualysGuard subscription. 


VULNERABILITY DETAIL 


A new critical Denial of Service vulnerability has been identified affecting all Cisco routers 
and switches running Cisco IOS software and configured to process standard Internet 
Protocol version 4 (IPv4) packets. This vulnerability can force the router to stop 
processing inbound traffic and servicing legitimate requests, resulting in a Denial of 
Service condition. 


For additional information on the Cisco IOS Vulnerability, please visit: 
http: //www.cisco.com/warp/public/707/cisco-sa-20030717-blocked.shtml 


HOW TO PROTECT YOUR NETWORK 


A check for this vulnerability is already available in the QualysGuard Vulnerability 
assessment platform. A comprehensive scan will detect this issue in addition to over 
2,800 other potential vulnerabilities. QualysGuard users can perform a selective scan for 
this specific vulnerability using the following check: 


= "Cisco IOS Malformed IPV4 Packet Denial Of Service Vulnerability" (Qualys ID: 43051) 


TECHNICAL SUPPORT 


For more information, customers can contact Qualys Technical Support directly at 
support@qualys.com or 1-866-801-6161. 
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ABOUT QUALYSGUARD 


QualysGuard is an on-demand security audit service delivered over the web that enables 
organizations to effectively manage their vulnerabilities and maintain control over their 
network security with centralized reports, verified remedies, and full remediation 
workflow capabilities with trouble tickets. QualysGuard provides comprehensive reports 
on vulnerabilities including severity levels, time to fix estimates and impact on business, 
plus trend analysis on security issues. By continuously and proactively monitoring all 
network access points, QualysGuard dramatically reduces security managers’ time 
researching, scanning and fixing network exposures and enables companies to eliminate 
network vulnerabilities before they can be exploited. 


Access for QualysGuard customers: https://qualysguard.qualys.com 


Free trial of QualysGuard service: https://qualysguard.qualys.com 
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